CVE-2016-1708 in Chromeinfo

Summary

The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

01/12/2016

Disclosure

07/23/2016

Entries

1: VDB-90231

CPE

ready

CVSS

8.8

EPSS

0.01522

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!